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CONTROL UNIT AND ACCELERATION SENSOR SYSTEM 
Field Of The Invention 

The present invention is directed to a control unit and an acceleration sensor system. 
Background Information 

A control unit for actuating passenger protection means having an electronic safety switch is 
5 known from German Patent No. 100 57 916, the safety switch, independently of a processor, 
releasing output stages as a function of a signal of an acceleration sensor system. As a 
function of this signal, the processor determines whether the output stages and thus the 
passenger protection means are actuated, thereby establishing a hardware-independent 
plausibility check and redundancy. 

Summary Of The Invention 

The control unit and the acceleration sensor system according to the present invention have 
the advantage over the related art that the safety switch already analyzes the integrated 
acceleration signal, since the acceleration sensor system itself integrates the acceleration 
signal. For this purpose, an integrator, which integrates either one or multiple acceleration 
signals generated by the acceleration sensor system, is advantageously present in the 
acceleration sensor system. This has the advantage that the integrator may be omitted from 
the processor, i.e., the microcontroller in the control unit, thereby making a simpler design 
possible. Moreover, the safety switch may already analyze the integrated acceleration signal, 
thereby permitting a better analysis vis-a-vis the one acceleration signal. The presence of an 
integrator or a filter in the safety switch itself, for smoothing the acceleration signal, is also 
avoided. Primarily, it is thereby achieved that the plausibility for a possible crash may be 
determined with greater accuracy. If the one acceleration signal is analyzed by the safety 
switch, threshold values, with which the safety switch compares the signal, must be set as 
high as possible so that momentary acceleration peaks do not result in the release of the 
output stages in the control unit. However, it is possible in the integrated acceleration signal 
to set the threshold values correspondingly lower in order to achieve a more accurate 
plausibility check so that in triggering events, which do not involve such a high acceleration 
signal, the output stages are still released. 
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It is particularly advantageous that the acceleration* sensor system itself has an integrator and 
that this pre-processing is accommodated in one housing. In addition, high pass filtering may 
also be provided, which is implemented as either analog or digital. High pass filtering is 
advantageously present in order to compensate for a possible offset drift of the acceleration 
5 sensor system. For this purpose, a high pass filter of the first order having 1 Hz to 2 Hz may 
be connected downstream, for example. This may be useful when driving on gravel in 
particular. 

Brief Description Of The Drawings 

Fig. 1 shows a block diagram of the control unit according to the present invention 
10 Fig. 2 shows a first block diagram of the acceleration sensor system 

Fig. 3 shows a second block diagram of the acceleration sensor system 

Fig. 4 shows a signal/time diagram. 

Fig. 5 shows another signal/time diagram. 

Detailed Description 

15 Redundant analysis of sensor signals in airbag control units has always been carried out in 
order to achieve a high level of safety in the actuation of passenger protection means such as 
airbags, seatbelt tensioners, or roll bars. Previously, mechanical switches were predominantly 
used, which were situated in the current circuit to the output stages, for example, and 
completed this current circuit at a correspondingly high acceleration. However, electronic 

20 safety switches are also increasingly used. These electronic safety switches have electronic 
structures which enable the analysis of sensor signals. These electronic structures are 
therefore similar to a switching unit or arithmetic unit. 

It is provided according to the present invention that the acceleration sensor systems already 
output integrated acceleration signals which the safety switch subsequently analyzes in 
25 parallel to the processor. The processor or microcontroller is saved the complex function of 
integrating the acceleration signals so that it may have a simpler design and, based on the 
integrated acceleration signals, the safety switch is able to analyze the sensor signals more 
accurately to determine whether or not a crash event exists. 
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Figure 1 shows a block diagram of the control uniraccording to the present invention. An 
acceleration sensor system S, which is able to detect the acceleration at least in the vehicle 
longitudinal direction, is situated in the housing of control unit SG. It is possible that 
acceleration sensor system S may also detect accelerations in the vehicle transverse direction. 
5 For this purpose, sensor elements may be sensitive in the vehicle longitudinal direction and 
the vehicle transverse direction or angular thereto. Sensors which are acceleration-sensitive in 
the vehicle vertical direction may also be used. These could be installed in the B and/or Ca- 
pillar for rollover detection, for example. Sensor S is connected to a microcontroller jiC and 
an electronic safety switch SCON via a data output. Microcontroller y.C receives signals from 
10 an interface module IF via a second data input. Microcontroller jliC is connected to an output 
stage module FLIC via a data output. 

Communication between the modules in control unit SG and processor \iC preferably takes 
place via the SPI (serial peripheral interface bus). This bus is configured as a master/slave 
bus, microcontroller |iC being the master and the connected modules being the slaves. The 

15 signals from interface module IF are sent not only to microcontroller |iC but also to a second 
data input of safety switch SCON. Safety switch SCON is connected to output stage module 
FLIC via a data output. Outside of control unit SG, a peripheral sensor PAS is connected to 
interface module IF. Only a single module PAS is shown here as an example; however, many 
more modules may be installed in the vehicle. Acceleration sensor system PAS, for example, 

20 may be situated in the B-pillar for side impact detection and also on the radiator grill as an 
upfront sensor. For the sake of simplicity, additional modules, which are also situated in 
control unit SG but are nonessential for the description of the present invention, are not 
shown. The triggering circuits for the individual airbags and seat belt tensioners as well as 
roll bars are then connected to output stage module FLIC. 

25 The function is as follows: 

Accelerations, which the vehicle experiences due to an accident, are measured via sensors S 
and PAS and these sensor signals are then output by sensors S and PAS as integrated 
acceleration signals. The sensor signals from sensors S and PAS are analyzed by processor 
jiC and safety module SCON, independently of one another. A complex triggering algorithm 
30 runs on processor ^C which, based on a signal analysis, determines whether and which 

restraining means are to be triggered. Parallel to this action, safety module SCON analyzes 
the sensor signals using straightforward, fixed threshold values. It is possible that a 
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straightforward algorithm also runs on safety module SCON. Furthermore, it is possible that 
safety module SCON executes watchdog functions for processor jaC. However, these are not 
illustrated here. It is essential for the present invention that sensors S and PAS output 
integrated acceleration signals so that processor ^C does not have to carry out the integration 
5 itself and safety module SCON is able to carry out the threshold value comparison based on 
these integrated acceleration signals and is therefore able to carry out a more accurate 
plausibility check of a triggering decision by processor |iC. If safety module SCON 
recognizes this triggering event it releases output stage module FLIC so that, at a firing 
command of processor ^iC, the output stages may be completed and the igniting current may 
10 flow into the triggering circuits. 

In a first exemplary embodiment, Figure 2 illustrates the internal structure of sensors S and 
PAS. Sensor element 20 outputs signals to an amplifier 21 which amplifies these signals. 
Sensor element 20 may be a diaphragm or a finger structure. However, other concepts for 
detecting the acceleration are also possible. Amplifier 21 outputs the amplified sensor signal 
15 to an analog- to-digital converter 22. The analog-to-digital converter carries out a digitization 
of the sensor signal. This is subsequently digitally integrated in module 23. Electronic high 
pass filtering takes place in module 24. This high pass filtering is necessary in order to 
compensate for a possible offset drift of the sensor. In the absence of such a high pass, the 
sensor's offset drift could result in a triggering signal without a triggering event existing. 

20 In a second exemplary embodiment, Figure 3 illustrates the internal structure of sensors S and 
PAS according to the present invention. A sensor element 30, which corresponds to sensor 
element 20, is connected to an amplifier 31, which in turn corresponds to amplifier 21. The 
amplified output signal of amplifier 31 is integrated in an analog manner by an integrator 32 
and subsequently filtered through an analog high pass filter in a high pass filter 33 in order to 

25 eliminate the offset drift. The signal, processed in this way, is subsequently digitized in an 
analog-to-digital converter 34 so that it is able to be directly output by sensor S or sensor 
PAS and analyzed by processor |iC and safety switch SCON. Additional hybrids between the 
examples from Figures 2 and 3 are possible. 

The sensor signal of sensors S and PAS in the event of a crash is explained in Figure 4 based 
30 on a first signal/time diagram. The time is shown on the abscissa and the signal is shown on 
the ordinate in arbitrary units. In this instance it is a 30 km/h crash with a pole. Curve 40 
represents the integrated acceleration signal, while curve 41 is the derived integrated signal 
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and curve 42 is the original acceleration signal which, however, has been filtered through a 
360 Hz 3 pole Bessel filter. 

Original sensor signal 42 is thus filtered using the 360 Hz low pass and is sampled at 2 kHz. 
The values are subsequently added and high pass-filtered at 2 Hz. The signal is then 
5 transmitted with a resolution of ± 480 LSB (least significant bit) (10 bit). Microcontroller \iC 
then internally has the possibility of drawing on the direct acceleration signal via a simple 
subtraction, which is signal 41. Depending on the threshold value, integrated sensor signal 40 
would result in a resolution at 100 LSB to 200 LSB approximately 7 ms to 9 ms or 2 ms to 5 
ms after the acceleration occurred. The original sensor signal may be reconstructed quite 

10 well, at least in the trigger-relevant part of the signal. High pass filtering subsequently results 
in a slight offset. High pass filtering is necessary to filter away slight sensor offset drifts. 
High pass filtering was checked based on driving on gravel. Figure 5 shows the result. A 
signal/time diagram is also shown here in which again the time is indicated on the abscissa 
and arbitrary units for the signal are indicated on the ordinate. Curve 50 shows the integrated 

1 5 acceleration signal without high pass filtering, curve 5 1 shows the integrated signal with high 
pass filtering, and curve 52 shows the acceleration signal after low pass filtering. Curve 50 
shows that, without high pass filtering, trigger-relevant signals would be generated due to the 
fact that the sensor's offset drift is disregarded, while with high pass filtering no trigger- 
relevant signals are generated, even during this drive on gravel. 
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